SSLBL: Malicious SSL certificate detected (Vidar C&C)

SID: 903209738Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedMay 26, 2026
UpdatedMay 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Vidar C&C)"; tls_cert_fingerprint; content:"45:68:45:ea:ff:7d:60:6f:f3:24:76:39:4a:7b:29:2b:ba:ed:7a:e4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/456845eaff7d606ff32476394a7b292bbaed7ae4/; sid:903209738; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/456845eaff7d606ff32476394a7b292bbaed7ae4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!